Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier: Vn9xVjkwn5IBFGcbBPDApmrEK+zkJz8ru42tHQXnJFo=
Subject key identifier: 49:D6:7F:4C:29:B8:20:6B:BD:E9:8D:4F:86:EA:7F:41:22:5B:1B:AF
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 019CAA2152C432CA96B2306EC0F000A34762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number: 1408
Signing time: Sun 01 Mar 2026 16:00:36 +0000
Manifest this update: Sun 01 Mar 2026 16:00:36 +0000
Manifest next update: Mon 02 Mar 2026 16:00:36 +0000
Files and hashes: 1: HTwlYLS_ffwhQcdIe5ndzskreto.roa (hash: 2KCaWvsbTh5/gdngs8HmHbk57EMiFOhMngXsbQP11o0=)
2: a4zBtMFZYByhLbfrS1dLgNWkKck.roa (hash: dYhiBJ/AxN48Rl+cu3HQdPVxUF/dVcAsWXYAXFUPJcE=)
3: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: Ta93+P2xmUjM1pCkjkRiE4d1vlmVa99dKYX/dKIVD+4=)
4: xSQW2sggbgbxw6ad1ltpXUi4AL0.roa (hash: TfP2oPkLUpfY+mHh6+HX4amHLmgM458P4qEzEj5WmsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:52:c4:32:ca:96:b2:30:6e:c0:f0:00:a3:47:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Mar 1 16:00:36 2026 GMT
Not After : Mar 2 16:00:36 2026 GMT
Subject: CN=49d67f4c29b8206bbde98d4f86ea7f41225b1baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ae:cb:43:a7:40:02:83:1a:94:78:5a:a3:69:
49:f5:f5:8f:19:11:2c:04:29:16:8e:90:ac:02:8f:
02:dc:b3:4b:ac:3d:93:4f:70:6e:9d:72:15:ba:8d:
13:44:b0:b7:b1:0c:ff:29:25:fb:f6:b3:a5:73:6e:
51:ed:e9:55:e6:e0:d1:a2:af:c7:bd:2a:99:d4:bf:
fb:ae:f8:af:f4:0f:0d:06:f5:5f:87:50:dd:6a:b5:
1d:c8:10:af:22:cc:11:55:af:71:45:37:3d:79:72:
fa:68:2a:8f:4c:07:95:1c:44:93:8a:87:0d:37:dd:
e4:d6:2f:f1:04:e8:f2:ba:d1:08:9d:91:89:45:63:
73:e7:fb:43:2b:32:a8:a9:1f:12:6b:43:15:c9:df:
6b:94:c9:9a:d1:40:b7:34:8d:23:a7:be:e2:f8:68:
db:d2:a2:7f:0b:c5:1c:9c:29:eb:d7:d3:ac:e6:45:
2d:67:e1:5d:ad:04:9d:5f:31:ed:40:85:7e:54:b2:
63:b3:55:01:b0:87:81:26:44:f9:be:0b:2a:3e:17:
49:8d:a9:2f:da:fd:62:2e:ac:b3:d2:0f:90:6d:31:
0d:68:c8:f1:0e:47:b6:c5:e1:8a:67:1d:7c:72:c6:
43:1d:bd:38:36:6e:3f:68:52:88:73:3a:76:68:6a:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D6:7F:4C:29:B8:20:6B:BD:E9:8D:4F:86:EA:7F:41:22:5B:1B:AF
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fc:ef:48:f8:6a:39:65:15:aa:b3:9e:86:41:e4:bd:80:8e:
82:46:3c:aa:d4:f1:bb:cf:19:7e:4f:d2:3e:6e:c2:41:6f:24:
f9:dc:9c:97:97:e6:78:3f:32:2e:8f:49:b0:af:68:f6:09:ed:
9f:ca:c8:35:12:01:6c:40:42:47:ab:1f:24:f5:89:8d:43:b0:
dd:33:55:42:08:8f:af:f0:e0:56:01:15:ae:e0:c5:b0:7a:01:
48:32:ce:4b:8d:45:ce:e0:51:b9:d5:a3:46:c1:d2:54:72:d7:
73:f4:6c:bf:df:02:45:71:e1:dc:db:a3:c6:33:c7:bf:f2:ba:
26:87:42:d4:ec:de:9b:00:3d:18:2f:30:45:a9:1e:73:97:df:
3c:11:40:ee:07:16:d6:16:69:70:df:70:ad:0c:ca:ac:40:2c:
6c:32:65:38:b5:94:61:c4:2b:cd:12:83:4c:99:5d:1a:96:1f:
2e:06:1b:12:f8:e1:1b:7d:5a:8c:9f:0a:cf:c5:51:86:3e:50:
36:73:7e:11:e4:9f:13:db:ce:07:d1:19:36:44:1f:46:37:e9:
ce:c5:c3:16:bd:8e:cc:52:d4:df:1c:b5:86:09:6b:75:9d:0a:
27:0b:bd:bf:b0:f2:03:c3:4e:c7:96:b8:9a:81:2d:e2:2b:63:
81:9b:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:07 2026 by rpki-client